Privacy · enquiry data · cookies
Privacy notice
Stratovape sells to businesses, not to consumers, and the only personal data this site asks for is what a quotation needs. This page states what is collected, why, how long it is kept and how to have it removed — in the same plain terms as the rest of the site.
Last updated
Who is responsible for your data
The controller is Hong Kong Hongshida International Co., Limited (香港鸿事达国际有限公司), a Hong Kong company that manufactures in and ships from Shanghai, China. Privacy questions go to stratovape@outlook.com or +86-139-1815-6638, and are answered by the person handling your file. No data protection officer has been appointed, because the processing is limited to business enquiries.
What the form collects
The enquiry form asks for your name, company, business email, telephone (optional), country, the model you are interested in, quantity, application and your message. Alongside the message, the server records the consent checkbox and its time, plus the IP address, browser user agent and referring page of the submission. Those last three exist to filter automated spam and keep an abuse log; they are not used to build a profile.
The public site runs no analytics, no advertising pixels and no social plug-ins. Nothing you read here is tracked across other sites.
Why we use it
- To answer the enquiry and send a quotation, or explain why we cannot supply.
- To confirm that the enquiry comes from a trading entity, because the site is trade-only.
- To keep a record of what was quoted, so a repeat order or a sample request matches the first.
- To block automated submissions and rate-limit abuse.
Legal basis
Where the GDPR or UK GDPR applies, the bases are: your consent, given by the checkbox, for the enquiry itself; our legitimate interests in answering business enquiries and keeping the site usable; and, where an order follows, the steps needed to enter a contract. Consent can be withdrawn at any time by writing to the address above — it stops future processing, and does not undo what was already done.
Cookies and local storage
The public site sets no cookies. One sessionStorage entry (key jec-splash) remembers that the intro animation has played, so it does not replay on every page; it holds no identifier and disappears when the tab closes. The administration area, which is not public and not linked from the site, uses a session cookie after login.
The hosting provider keeps standard access logs — IP address, time, requested URL, user agent — for security and error diagnosis, and rotates them on its own schedule.
Who else sees it
We do not sell, rent or trade enquiry data. It is visible to the staff who answer enquiries, the hosting provider that stores the site and its data directory, and the email provider that delivers the notification. Those providers act on our instructions and may not use the data for their own marketing. We disclose data where a law, a court order or a customs authority requires it.
How long we keep it
Enquiry records are kept for up to 24 months from the last contact, then deleted. Spam and rate-limit logs are kept for up to 12 months. If an order follows, the commercial records that tax and product-traceability law requires are kept for the statutory period, separately from the enquiry.
Where it is processed
Our team works from Shanghai, and the site runs on infrastructure we control, so your message may be processed outside the EEA or the UK. Where a transfer needs a safeguard, we rely on the hosting and email providers' standard contractual clauses. Sending an enquiry means you understand that it will be read outside your own jurisdiction.
Your rights
Under the GDPR or UK GDPR you may ask for a copy of your data, its correction or deletion, restriction of processing, portability, or object to processing based on legitimate interests; you may also withdraw consent. Write to stratovape@outlook.com with “privacy” in the subject line; we answer within 30 days. You can complain to your supervisory authority — in the UK, the Information Commissioner's Office (ico.org.uk); in the EU, the authority in your member state.
Children and age
The site and the products are for adults. We do not knowingly collect data from anyone under 18, or under the higher age set by the destination market. If you believe a minor has sent an enquiry, write to us and the record will be deleted.
Security
Enquiries are transmitted over TLS and stored in a directory that robots.txt excludes and the web server denies. Access is limited to the people who answer enquiries. No system is perfect; if a breach affects you, we will tell you and the relevant authority as the law requires.
Changes to this notice
The date at the top of this page is the date of the last change. Material changes are noted here, and the enquiry form always links to the current version.